|
Darkfeather -> RE: Hackers and CM (8/14/2013 10:18:42 AM)
|
quote:
ORIGINAL: shallowdeep
Late, but I wanted to add a few comments for anyone interested:
1. As suggested, the email might have been a phishing ploy. However, assuming the email account was a Gmail one, Google actually does send out bona fide, identically worded warnings when it detects suspicious activity with an account. These warnings should absolutely not be ignored. If you are certain the login attempt was not from you, it means that your Google account's password is compromised. That said, do not click on any links from within the warning email. Instead visit gmail.com directly from a browser. If the warning was valid and not a phishing attempt, you will see a red notice near the top about unusual activity, something like this. In this case, it's time to change your password (and not just by one character) and probably scan for malware. Setting up two-factor authentication on your Google account is also a good idea.
2. Collarme.com doesn't know, let alone store, any information about your associated email account's password, so it's not likely to be the source of any compromise of the latter. Providing you don't reuse passwords, at any rate. And no one would ever do that, I'm sure.
3. McAfee SiteAdvisor has often listed collarme.com as a Yellow/Caution/Minor Risk. As far as I can tell, this appears to be based solely on the "reputation" of the site in their TrustedSource system rather than any specific detected threat. If McAfee detects an actual specific threat, like hosted malware, they use a Red/Warning/Serious Risk indication. Not everything on the other side should be taken at face value, so the caution warning to potential visitors doesn't seem wholly out of place, but it's not intended to indicate a serious, imminent security risk. If the administration believes the site merits a better rating, they can request a review.
1. Receive enough of these and you will see the pattern. I have gotten them from my "bank", games I have never even played before, store websites I have never registered to, etc. As long as cookies are stored on your computer, they will have all they need to phish. The key to not getting scammed is going anywhere strange or fishy and entering any information, period.
2. Again, it's not Collarme, or any one site, that reveals information. As those who are phishing don't actually know anything yet. All they have is your browsing history and your email, courtesy of cookies.
3. McAfee, and I am guessing other software, report Collarme as suspicious solely for the ads. If it were truly a suspicious website, site advisor wouldn't even allow visiting here without click-through consent (you get a warning page), taking full responsibility for the risk
|
|
|
|
